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Awtt^ndments to the Claims: 

This listing of claims will replace all prior versions, and listings of claims in the 
application: 
Listing of Claims! 

1 . (Original) A network configuration entity configured or adapted to exclusively 
control a defined set of management jfunctions throughout a secure network, said secure networic 
comprising a plurality of switching devices, said set of management functions comprising the 
recognition, operation and succession of the network configuration entity. 

2. (Original) The network configuration entity of claim 1 further comprising a memory 
for storing an NCE list, said NCE list comprising an indication of each device in the network that 
may oi>erate as said network configuration entity. 

3. (Original) The network configuration entity of claim 1 wherein said set of 
management functions further comprise one or more rules for interaction between and among 
devices in the network. 

4. (Original) The network configuration entity of claim 1 wherein said set of 
management fimctions fiirther comprises device connection controls that indicate port 
relationships in said secure network 

5. (Original) The network configuration entity of claim 4 fiirther comprising a memory 
for storing a DCC list, said DCC list associated with said one or more rules for interaction 
between and among devices and comprising definitions that logically bind a port on the network 
configuration entity, to one or more other ports resident in the secure network, 

6. (Original) The network configuration entity of claim 3 fiorther comprising a memory 
for storing a DCC list, said DCC list associated with said one or more rules for interaction 
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between and among devices and comprising definitions that logically bind each port in said 
secure network to one or more other ports resident in said said network. 

7. (Original) The invention of claim 6 wherein said ports are identified by a unique 
number. 



8* (Original) The invention of claim 7 wherein said unique number is a world-widc- 

name. 

9. (Original) The network configuration entity of claim 1 wherein said set of 
management functions, further comprises management access controls that restrict management 
services to a dejQned set of endpoints. 

10. (Original) The network configuration entity of claim 9 ftirther comprising a memory 
for storing an MAC list, said MAC list comprising an indication of network endpoints fiom 
which management access is acceptable. 

1 1 . (Original) The invention of claim 9 wherein said network endpoints comprise IP 
addresses. 

12. (Original) The invention of claim 1 1 wherein said IP addxiesses axe associated with 
access fi^om SNMP or Telnet or HTTP or API. 

13. (Original) The invention of claim 9 wherein said network endpoints comprise 
uniquely identified device ports. 

14. (Original) The invention of claim 9 wherein said network endpoints comprise 
uniquely identified devices resident in said secure network. 
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15. (Original) The network configuration entity of claim 1 wherein said set of 
management functions further comprises switch connection controls for designating devices to 
participate in the seciire network. 

16. (Original) The network configuration entity of claim 15 further comprising a 
memory for storing an SCC list, said SCC list associated with said switch connection controls 
and comprising a list of devices authorized to participate in said secure network. 

17. (Original) A network configuration entity configured or adapted to exclusively 
control a defined set of management functions throughout a secure netwoiic, said secure network 
comprising a plurality of switchiRg devices, said set of management functions comprising (i) the 
recognition, operation and succession of the network configuration entity, (ii) switch connection 
controls for designating devices to participate in the secure network, (iii) device connection 
controls that indicate port relationships in said secure network, and (iv) management access 
controls that restrict management services to a defmed set of endpoints, said network 
conftgutation entity comprising; 

a processor; and 
a memory for storing 

an NCE list, said NCE list comprising an indication of each device in the network that 
may operate as said network configuration entity, 

an SCC list, said SCC list comprising an indication of each device allovi/ed to participate 
in said secure network, 

a DCC list, said DCC list comprising definitions that logically bind a port on the network 
configuration entity, to one or more other ports resident in the secure network, and, 

. a MAC list, said MAC list comprising an indication of network endpoints from which 
management access is acceptable. 

18. (Original) A Fibre Channel switching device configured or adapted to operate in a 
secure network wherein a defined set of management functions is controlled throughout said 
secure network by a network configuration entity, said secure network comprising a plurality of 
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switching devices, said set of management functions comprising (i) the recognition, operation 
and succession of the network configuration entity, (ii) switch connection controls for 
designating devices to participate in the secure network, (iii) device connection controls that 
indicate port relationships in said secure network, and (iv) management access controls that 
restrict management services to a defined set of endpoints, said Fibre Channel switching device 
comprising; 

a processor; and 

a memory for storing 

an NCE list, said NCE list associated with said recognition, operation and succession of 
the network configuration entity and comprising an indication of each device in the network that 
may operate as said network configuration entity, 

an sec list, said SCC list associated with said switch connection controls and comprising 
an indication of each device allowed to participate in said secure network, 

a DCC list, said DCC list associated with said device connection controls and comprising 
definitions that logically bind a port on the network conjflguration entity, to one or more other 
ports resident in the secure network, and, 

a MAC list, said MAC list associated with said management access controls and 
comprising an indication of network endpoints from which managenient access is acceptable. 

19. (Original) A Fibre Channel switching device configured or adapted to operate in a 
secure- network wherein a defined set of management functions is controlled throughout said 
secure network by a network configuration entity, said secure network comprising a plurality of 
switching devices, said set of management fiinctions comprising (i) the recognition, operation 
and succession of the network configuration entity, and (ii) switch connection controls for 
designating devices to participate in the secure network, said Fibre Channel switching device 
comprising; 

a processor; and 

a memory for storing 
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an NCE list, said NCE list associated with said recognition, operation and succession of 
the network configuration entity and comprising an indication of each device in the network that 
may operate as said network configuration entity, and 

an sec list» said SCC list associated with said switch connection controls and comprising 
an indication of each device allowed to participate in said secure network. 

20. (Original) A Fibre Channel switching device configured or adapted to operate in a 
secure network wherein a defined set of management functions is controlled throughout said 
secure network by a network configuration entity, said secure network comprising a plurality of 
switching devices, said set of management fiincttons comprising (i) the recognition> operation 
and succession of the networik configuration entity, and (ii) device connection controls that 
indicate port relationships in said secure network, said Fibre Channel switching device 
comprising; 

a processor; and 
a memory for storing 

an NCE Iist> said NCE list associated with said recognition, operation and succession of 
the network configuration entity and comprising an indication of each device in the network that 
may operate as said network configuration entity, and 

a DCC list, said DCC list associated with said device connection controls and comprising 
definitions that logically bind a port on the network configuration entity, to one or more other 
ports resident in the secure network. 

21 . (Original) A Fibre Channel switching device configured or adapted to operate in a 
secure network wherein a defined set of management functions is controlled throughout said 
secure network by a network configuration entity, said secure network comprising a plurality of 
switching devices, said set of management fimctions comprising (t) the recognition, operation 
and succession of the network configuration entity, and (ii) management access controls that 
restrict ixxanagement services to a defined set of endpoints, said Fibre Channel switching device 
comprising; 

a processor, and 
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a memory for storing 

an NCE list, said NCE list associated with said recognition, operation and succession of 
the network configuration entity and comprising an indication of each device in the network that 
may operate as said network configuration entity, and 

a MAC list, said MAC list associated with said management access controls and 
comprising an indication of network endpoints from which management access is acceptable. 

22. (Original) A Fibre Channel switching device configured or adapted to operate in a 
secure network wherein a defined set of management fimctions is controlled tluoughout said 
secure network by a network configuration entity, said secure network comprising a plurality of 
switching devices, said set of management functions comprising (i) switch connection controls 
for designating devices to participate in the secure network, and (ii) device connection controls 
that indicate port relationships in said secure network, said Fibre Channel switching device 
comprising; 

a processor; and 
a memory for storing 

: an sec list, said SCC list associated with said switch connection controls and comprising 
an indication of each device allowed to participate in said secure network, and 

a DCC list, said DCC list associated with said device connection controls and comprising 
definitions that logically bind a port on the network configuration entity, to one or more other 
ports resident in the secure network. 

23, (Original) A Fibre Channel switching device configured or adapted to operate in a 
secure network wherein a defined set of management functions is controlled throughout said 
secure network by a network configuration entity, said secure network comprising a plurality of 
switching devices, said set of management functions comprising (i) switch connection controls 
for designating devices to participate in the secure network, and (ii) management access controls 
that restrict management services to a defined set of endpoints, said Fibre Channel switching 
device comprising; 

a processor; and 
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a memory for storing 

an sec list, said SCC list associated with said switch connection controls and comprising 
an indication of each device allowed to participate in said secure network, and 

a MAC list, said MAC list associated with said management access controls and 
comprising an indication of network endpoints from which management access is acceptable. 

24. (Original) A Fibre Channel switching device configured or adapted to operate in a 
secure network wherein a defined set of management functions is controlled throughout said 
secure network by a network configuration entity, said secure network comprising a plurality of 
switching devices, said set of management functions comprising (i) device connection controls 
that indicate port relationships in said secure network, and (ii) management access controls that 
restrict management services to a defined set of endpoints, said Fibre Channel switching device 
comprising; 

a processor; and 
a memory for storing 

a DCC listj said DCC list associated with said device cormection controls and comprising 
definitions that logically bind a port on the network configuration entity, to one or more other 
ports resident in the secure network, and, 

a MAC list, said MAC list associated with said management access controls and 
comprising an indication of network endpoints from which management access is acceptable. 

25. (Original) A network comprising a network configuration entity and one or more 
other entities, said network configuration entity having network-wide control over a defined set 
of management functions, said set of management functions comprising: 

the recognition, operation and succession of the network configuration entity; 
one or more rules for interaction between and among entities in the netwotic; 
one or more rules governing management level access to the network; and 
one or more rules governing management level access to one or more entities- 
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26. (Original) The network of claim 25 wherein said function of recognition, operation 
and succession of the network configuration entity is associated with a list of network devices 
that are eligible to become equivalent to said network configuration entity. 

27. (Original) The network of claim 25 wherein the network configuration entity has 
exclusive control over one or more of said management functions. 

28. (Original) The network of claim 25 further comprising one or more back-up network 
configuration entities. 

29. (Original) The network of claim 25 wherein each of said security and management 
functions corresponds with a data structure in a memory. 

Claims 30-53 (Clancelled) 

54. (Original) A method of securing a network having a Fibre Channel switching device 
configured or adapted to operate in a secure network wherein a defined set of management 
function is controlled throughout said secure network by a network configuration entity, said 
method comprising the steps of : 

controlling the recognition, operation and succession of the network configuration entity 
by designating an NCE list comprising an indication of each device in the network that may 
operate as said network configuration entity; 

designating a unique name for each devices that may participate in the sectire network; 

indicating port relationships in said secure network to specifically delineate a list of 
unique names for ports that any given port may communicate with; and 

restricting management access to a pre-defined set of access methods. 
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